Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how themeisle compares to other vendors in security performance

View Risk Score →

Software

themeisle orbit fox wordpress
15
themeisle multiple page generator wordpress
10
themeisle orbit fox
9
themeisle otter blocks wordpress
9
themeisle rss aggregator by feedzy wordpress
8
themeisle visualizer wordpress
5
themeisle ppom for woocommerce
3
themeisle hestia
2
themeisle multiple page generator plugin – mpg
2
themeisle otter - gutenberg block
2
themeisle product addons \& fields for woocommerce wordpress
2
themeisle visualizer
2
themeisle auto featured image (auto post thumbnail)
1
themeisle cloud templates \& patterns collection wordpress
1
themeisle cyrlitera (wordpress plugin)
1
themeisle disable admin notices individually
1
themeisle disable comments for any post types (remove comments)
1
themeisle google maps plugin by intergeo wordpress
1
themeisle lightstart wordpress
1
themeisle masteriyo lms pro
1
themeisle menu icons
1
themeisle multiple page generator plugin
1
themeisle otter blocks
1
themeisle woody ad snippets
1
themeisle wp full stripe free
1
themeisle wp maintenance mode & coming soon
1

Themeisle Orbit FoxOrbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload

Risk 38
Severity
6.1
First published (updated )
CVE-2026-16583

Themeisle Orbit FoxWordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability

Risk 40
Severity
5.9
First published (updated )
CVE-2026-65563

Themeisle Auto Featured Image (Auto Post Thumbnail)WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability

Risk 32
Severity
4.9
First published (updated )
CVE-2026-61970

Themeisle Orbit FoxOrbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu-item-icon' Parameter

Risk 28
Severity
4.4
First published (updated )
CVE-2026-11358

Themeisle Masteriyo LMS PROWordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2025-53209
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themeisle Disable Comments for Any Post Types (Remove comments)WordPress Disable Comments for Any Post Types (Remove comments) plugin <= 1.3.0 - Broken Authentication vulnerability

Risk 48
Severity
7.1
First published (updated )
CVE-2026-42749

Themeisle VisualizerWordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2026-24573

Themeisle Woody ad snippetsWordPress Woody ad snippets plugin <= 2.7.1 - Remote Code Execution (RCE) vulnerability

Risk 82
Severity
9.9
First published (updated )
CVE-2026-25366

Themeisle PPOM for WooCommerceWordPress PPOM for WooCommerce plugin <= 33.0.16 - Broken Access Control vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2025-66069

Themeisle WP Full Stripe FreeWordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection Vulnerability

Risk 47
Severity
7.6
First published (updated )
CVE-2025-58789
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themeisle Orbit FoxWordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2025-58593

Themeisle Otter - Gutenberg BlockWordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure Vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2025-55715

Themeisle HestiaWordPress Hestia theme <= 3.2.10 - Broken Access Control Vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-53986

Themeisle Cyrlitera (WordPress plugin)WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2025-53254

Themeisle Orbit FoxWordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability

Risk 34
Severity
6.5
First published (updated )
CVE-2025-22659
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themeisle Multiple Page Generator WordpressMultiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl

Risk 60
Severity
8.1
First published (updated )
CVE-2024-10705

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter

Risk 39
Severity
6.4
First published (updated )
CVE-2024-13183

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

Risk 28
Severity
6.4
EPSS
0.06%
First published (updated )
CVE-2025-0311

Themeisle HestiaWordPress Hestia theme <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
First published (updated )
CVE-2024-37467

Otter BlocksOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View

Risk 43
Severity
7.5
First published (updated )
CVE-2024-11219
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themeisle Disable Admin Notices individuallyWordPress Disable Admin Notices individually plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
First published (updated )
CVE-2024-52420

Themeisle Otter - Gutenberg BlockWordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerability

Risk 13
Severity
2.7
First published (updated )
CVE-2024-51671

Themeisle Multiple Page Generator WordpressMultiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion

Risk 16
Severity
2.7
First published (updated )
CVE-2024-10672

Themeisle Multiple Page Generator WordpressWordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.7 - SQL Injection vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2024-47325

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2024-7778
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2484

Themeisle Product Addons \& Fields For Woocommerce WordpressWordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2024-35728

Themeisle Otter BlocksWordPress Otter Blocks PRO plugin <= 2.6.11 - Authenticated Sensitive Data Exposure vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2024-35682

Themeisle Visualizer WordpressWordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2024-35736

Themeisle Menu IconsMenu Icons by ThemeIsle <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2024-4635
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203